drop registry prefetch evtx csv txt · 50+ wiper secure-delete privacy signatures · findings table · confidence severity · csv export · runs locally
evidence
drop multi-artifact evidence
registry exports · prefetch lists · evtx csv · path inventories · command history
89 anti-forensic signatures · drop evidence exports